Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/937b76-8915-40e1-a134-f2d6352b5e96/1/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.mft
File:                     J8b7UHD0ODlQPGvd9Rbeh8f7iQc.mft (raw, json)
Hash identifier:          m6eYqsRw8v6+AwUlU1rpc5owOwdeUaH7PCHGmLf4lHo=
Subject key identifier:   8E:A4:35:3B:14:0A:46:A6:FB:3F:00:4F:6A:54:3C:67:AF:30:F9:82
Authority key identifier: 27:C6:FB:50:70:F4:38:39:50:3C:6B:DD:F5:16:DE:87:C7:FB:89:07
Certificate issuer:       /CN=27c6fb5070f43839503c6bddf516de87c7fb8907
Certificate serial:       01A13410C91E53D75587E27B45FFD670151B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/937b76-8915-40e1-a134-f2d6352b5e96/1/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.mft
Manifest number:          1A9A
Signing time:             Tue 13 Oct 2026 07:01:17 +0000
Manifest this update:     Tue 13 Oct 2026 07:01:17 +0000
Manifest next update:     Wed 14 Oct 2026 07:01:17 +0000
Files and hashes:         1: J8b7UHD0ODlQPGvd9Rbeh8f7iQc.crl (hash: oUZkLWy/liYpeQSi2mvoBXK7Xi1DHFyt8w5RsUQkieo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/937b76-8915-40e1-a134-f2d6352b5e96/1/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/937b76-8915-40e1-a134-f2d6352b5e96/1/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 07:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:34:10:c9:1e:53:d7:55:87:e2:7b:45:ff:d6:70:15:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27c6fb5070f43839503c6bddf516de87c7fb8907
        Validity
            Not Before: Oct 13 07:01:17 2026 GMT
            Not After : Oct 14 07:01:17 2026 GMT
        Subject: CN=8ea4353b140a46a6fb3f004f6a543c67af30f982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:03:4a:86:5b:b7:b4:6f:ad:a8:0f:6e:b4:8e:
                    53:38:0a:17:9d:16:1c:36:ae:13:c7:38:6e:cc:af:
                    57:6a:5e:f7:4f:03:c2:37:25:c3:0e:f8:3f:87:40:
                    f7:36:45:f2:d3:9d:81:28:c5:ea:d2:32:67:62:0a:
                    32:bc:0c:89:83:03:ce:bc:d2:d8:db:c4:1d:37:31:
                    e4:b4:f0:a4:53:5f:94:2d:26:1a:ca:91:71:49:41:
                    a4:ca:64:58:e2:aa:e1:23:4e:ef:5e:04:eb:2a:ad:
                    cd:90:93:50:3c:e2:fd:81:6a:b0:fc:ed:ef:50:c0:
                    e0:a4:24:a2:52:14:02:e7:46:24:31:b5:fa:43:ac:
                    47:7a:71:a3:f0:12:be:21:71:75:f9:9f:b0:b1:19:
                    71:56:53:15:5e:07:6a:65:cb:46:e8:b7:3d:c4:70:
                    e3:07:b0:75:c3:02:ab:d8:0e:f2:fe:d6:cd:03:7a:
                    79:ba:03:a4:95:70:aa:00:e7:76:8d:36:dd:a4:ab:
                    c2:2c:46:d2:52:6f:1c:5b:53:63:ab:b5:45:a3:dd:
                    82:ce:87:77:36:46:b4:72:b3:3d:57:57:76:a2:7c:
                    68:7b:1f:97:ae:db:d0:95:5c:9d:ad:5a:c2:20:6a:
                    a8:3d:45:bb:49:32:e5:7b:8f:e0:00:07:b1:a6:eb:
                    17:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A4:35:3B:14:0A:46:A6:FB:3F:00:4F:6A:54:3C:67:AF:30:F9:82
            X509v3 Authority Key Identifier:
                keyid:27:C6:FB:50:70:F4:38:39:50:3C:6B:DD:F5:16:DE:87:C7:FB:89:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/937b76-8915-40e1-a134-f2d6352b5e96/1/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/937b76-8915-40e1-a134-f2d6352b5e96/1/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:ec:fd:b1:20:a7:22:05:74:f4:a0:bd:9c:b5:0c:cb:20:34:
         24:d8:c7:d7:a9:86:bb:0c:4c:92:43:96:e3:b4:d2:eb:37:cf:
         5d:6b:f3:27:f2:49:5f:f6:28:7b:37:c9:d9:5a:30:96:e0:83:
         f9:ce:91:13:6a:ea:ef:00:fb:08:2c:3d:b2:aa:c8:c6:60:38:
         7a:e1:57:d0:11:12:bf:66:1f:a0:ab:b2:92:71:03:cd:dd:2f:
         52:a2:19:d5:df:d7:71:b9:98:33:08:64:96:4e:ea:11:59:84:
         44:70:59:2a:a2:01:ac:70:a5:89:7e:ee:cd:4d:d0:f8:20:0a:
         b9:4b:f3:3d:c6:00:6e:5c:c2:f1:b3:e9:9c:6f:de:0f:5e:fd:
         05:a2:f1:fc:ac:25:b4:b6:4c:55:5a:37:9f:83:d1:ca:c0:cf:
         63:aa:49:8b:79:da:39:e6:87:d3:0a:8c:e6:21:58:f3:b8:60:
         90:01:88:ed:0e:89:3b:5b:71:21:2d:fb:7b:7d:e5:61:4a:2f:
         cb:3f:1c:53:49:6d:b4:4c:e6:44:2d:2f:a9:6a:e4:67:a7:ab:
         ea:db:16:67:e2:7f:7a:b4:4f:1e:eb:55:35:04:41:14:91:ad:
         9a:cb:fa:23:c6:9b:ca:1d:d5:68:dc:d2:84:36:0f:06:e9:86:
         cb:8e:c8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 16:01:21 2026 by rpki-client